← 首页

A Security Routine for When You Change Phone or SIM

Guides · 2026-09-26

Changing your phone or SIM card can silently break the two-factor authentication (2FA) that protects your crypto exchange account. If your authenticator app is tied to a device you no longer have, or your SMS codes go to a number that is no longer active, you may find yourself locked out right when you need to act. This guide walks you through a practical routine to update your security settings safely on Binance, OKX, Bybit, and Bitget. You will learn what to do before the switch, how to re-establish 2FA, and what to record so you can recover quickly if something goes wrong. The steps are based on official help centres and account settings pages, and they focus on verification and record-keeping rather than guesswork.

Before you switch: inventory your security methods

Start by logging in to each exchange you use and opening the security section of your account settings. Write down every 2FA method currently enabled: authenticator app, SMS, email, passkey, or hardware key. Note which phone number and email address are attached. Check whether you have backup codes saved and where they are stored. This inventory is your map for the switch; without it, you may forget a method that later blocks you.

Next, confirm that your new phone number and email will be active before you deactivate the old ones. If you rely on SMS codes, a gap between numbers can leave you unable to receive login codes. For authenticator apps, check whether the exchange offers a way to export or back up your codes, or whether you must re-bind the app after switching. The help centre article on two-factor authentication for each exchange explains the exact steps; read it before you make any changes.

Finally, decide on a stop condition. If you cannot access your old phone or SIM to approve a change, do not guess. Pause and contact support through the official help centre. Attempting to disable 2FA without following the correct recovery process can trigger security holds that take longer to resolve.

During the switch: re-bind 2FA step by step

When you are ready, log in to the exchange from a trusted device and go to the security settings. Disable the old 2FA method only after you have the new one ready. For an authenticator app, scan the new QR code with your new phone and enter the generated code to confirm. For SMS, update your phone number and wait for the verification message on the new SIM. Each exchange may require you to confirm the change via email or an existing 2FA method, so keep your old device nearby until the new method is active.

If you use a passkey or hardware key, re-register it on the new device following the help centre instructions. Do not delete the old passkey until the new one works. After re-binding, test the new 2FA by logging out and back in. This confirms that codes arrive and are accepted. If the test fails, stop and review the steps; repeating a failed attempt can lock your account temporarily.

For exchanges that support multiple 2FA methods, consider enabling more than one, such as an authenticator app plus a backup email. This gives you a fallback if one method fails. However, avoid enabling SMS if you are not sure your new number will remain active; a dead SMS method can become a hurdle later.

After the switch: verify access and record changes

Once your new 2FA is working, review your account activity log for any unrecognised logins or changes. If you see something suspicious, change your password and contact support immediately. Also check that your withdrawal addresses and API keys are still correct; some exchanges may restrict withdrawals for a period after a security change. This is a good time to review your API key permissions and delete any you no longer use.

Record the date you changed your phone or SIM, the 2FA methods you updated, and any support ticket numbers. Store this information in a secure place, separate from your 2FA codes. If you ever need to recover your account, this log will help you answer support questions accurately. For each exchange, note the specific help centre page you followed, so you can refer back if the process changes.

Finally, update your backup codes. When you re-bind 2FA, old backup codes may become invalid. Generate a new set and store them offline. Do not keep them on the same phone you just set up, because losing that phone would then lock you out of both your 2FA and your backup codes.

Common mistakes and how to avoid them

A frequent error is disabling the old 2FA before the new one is confirmed. This can leave you with no working 2FA and trigger a security freeze. Always add the new method first, test it, and only then remove the old one. Another mistake is using a phone number that you will lose soon, such as a temporary SIM. If you plan to travel or change numbers again, choose an authenticator app or hardware key instead of SMS.

Some users forget to update their email address at the same time. If your email is also tied to your old phone number for recovery, you could lose access to both. Update your email recovery options in the account settings as part of the same routine. Also, avoid taking screenshots of QR codes or backup codes; store them physically or in a dedicated encrypted manager.

If you get locked out despite following these steps, do not create a new account. Contact the exchange's official support through the help centre and follow their account recovery process. Provide the records you kept: dates, methods, and ticket numbers. Patience and accurate information are more effective than repeated attempts.

Risk boundary: Philippines Crypto Guide

Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.

Scenario checkpoint